SEARCH · Engineering Papers
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
This paper examines the impact that solar cycle 24 storms are likely to have on both the threat model and on the consequent availability of the system, and it proposes a means of improving WAAS availability without sacrificing system integrity.
Multiple companies are competing to develop human-crewed and unmanned aerial vehicles to provide flight in urban environments. With the growth of aerial systems and future airborne vehicle networks and the need to enable secure data exchange and service interactions within Urban Air Mobility (UAM) environments, cybersecurity has come to the forefront as a topic, highlighting the need to protect these networks from cyber-attacks. This paper will identify potential threats, vulnerabilities, and weaknesses of UAM environments, that could lead to system compromises and disruptions.
Destructive SEE pose serious challenges for the reliable use of COTS devices in space systems. We used system-level modeling to determine SEL rates that would likely compromise system reliability, resilience and capabilities. We then assembled a representative dataset of COTS CMOS parts and used nonparametric statistical techniques to assess the threat posed to redundant systems by destructive SEE.
Destructive SEE pose serious challenges for the reliable use of COTS devices in space systems. We use system-level modeling and non-parametric statistics to assess the threat posed to redundant systems by destructive SEE.
Accurately assessing asteroid threats relies on knowledge of the asteroid’s pre-entry properties such as size, velocity, and mass. Directly measuring these properties can be infeasible due to the sparsity of events and the accuracy and fidelity of various sensors. Current analysis of an asteroid’s pre-entry properties involves modeling the asteroid’s entry into the Earth’s atmosphere. This process can be time consuming and can require manual adjustment of uncertain modeling specific parameters. NASA Ames has developed a genetic algorithm that can help automate asteroid modeling using the Fragment-Cloud Model (FCM). The algorithm generates realistic energy deposition curves based on actual energy deposition curves from real, observed asteroids. By using these synthetic, labeled energy deposition curves, we developed a one-dimensional convolutional neural network that can predict an asteroid’s pre-entry parameters.
A high precision, high resolution Ocean Color Instrument (OCI) was developed for the Plankton, Aerosol, Cloud ocean Ecosystem (PACE) mission which required the use of electrically isolated Hybrid Bearings (silicon nitride balls). While desirable for technical performance of the instrument, this application caused portions of the instrument to become electrically isolated and come under threat of space charging effects from charged particles and the resultant differential charging. An evaluation of the environment, susceptibility of the components, such as bearings and electronics, and mitigation strategies were performed. As part of that process, simulations of the charging environment, analysis of internal mechanism charging and prediction of most likely discharge paths, testing of the bearings for susceptibility as well as resulting damage were performed and analyzed. Additionally, a novel method to deal with charging was developed. Considerations for dealing with electrically isolated mechanisms, results of the above-mentioned efforts as well as lessons learned are presented.
A system and method of detecting and analyzing a threat in a confined environment is disclosed. An audio board detects and analyzes audio signals which are then transmitted and analyzed to determine the location of a gunshot in a confined location and the type of firearm being shot.
Manual malware analysis is time consuming and is not scalable. This poster describes tools that INL has developed that automate and codify threat information.
An automatic threat recognition (ATR) system is disclosed for scanning an article to recognize contraband items or items of interest contained within the article. The ATR system uses a CAT scanner to obtain a CT image scan of objects within the article, representing a plurality of 2D image slices of the article and its contents. Each 2D image slice includes information forming a plurality of voxels. The ATR system includes a computer and determines which voxels have a likelihood of representing materials of interest. It then aggregates those voxels to produce detected objects. The detected objects are further classified as items of interest vs. not of interest. The ATR system is based on learned parameters for a novel interaction of global and object context mechanisms. ATR system performance may be optimized by using jointly optimal global and object context parameters learned during training. The global context parameters may apply to the article as a whole and facilitate object detection. The object context parameters may apply to the individual object detections.
As deployments of clean energy generation and storage assets continue to grow, the increased attack surface creates a greater risk for cyber threats, but is clean energy truly a target for cyber adversaries? This poster will present research on the trends in cyber incidents that have affected clean energy companies and assets as well as the trends in disclosed and exploited vulnerabilities. From a series of ransomware attacks on European wind manufacturers, to vulnerabilities exploited in solar assets to turn controllers into botnets, to attacks on communication infrastructure that have resulted in extended outages of remote control and monitoring, we explore the techniques used and the impacts to the clean energy sector. Key takeaways include understanding of how OT-focused malware is becoming more flexible and more destructive, how known vulnerabilities are being exploited, the growing number of IT and OT attacks that use built in tools and functionalities. Additionally, we highlight the presumed motivations and targeted sectors for various identified cyber adversaries. Viewers will leave with an understanding of how recent headlines fit into the development of cyberattack trends and what preventions they may need to take to protect against increasingly popular tactics.
CYBER THREAT PROPAGATION MODELING IN CYBER PHYSICAL SYSTEMS
The Digital Energy Transformation is redefining how power systems operate, integrating physical infrastructure with digital technologies to enhance efficiency, visibility, and resilience. For islanded and digitally modernizing systems like Hawai‘i’s, this shift presents both new opportunities and evolving challenges in cybersecurity, supply chain assurance, and environmental resilience. This brief provides an overview of critical infrastructure dependencies and systemic risks associated with increasing digital integration. It summarizes recent energy-sector threat activity and case studies that illustrate adversary tactics and supply chain vulnerabilities, and identifies pathways to strengthen resilience.
What major and minor cybersecurity events affected the energy sector in the last year? What trends were observed in the events, disclosure of vulnerabilities, and other headline news? This talk will focus on real-world events put in the context of an evolving geo-political landscape. We will discuss events that had operational impact as well as events affecting third-parties with exploration of how the impact of incidents is changing as more stakeholders are involved in new projects and the complexity of the modern grid. We will focus on lessons learned from the 2024 trends that operators and their partners can apply to stay ahead of the threats in 2025.
Today’s connected lighting systems have the potential to reduce energy consumption and operational costs via the use of the data they collect and share with other building systems (e.g., HVAC, building automation, security). However, many market available products are new to being networked, and when networked components in lighting and other building systems are not sufficiently secured, they present opportunities for criminals to exploit. Further, security vulnerabilities in one system can be used as lateral steppingstones that allow access to other prized assets on the same network. These cybersecurity concerns could deter the adoption and use of connected systems, which then could jeopardize long-term national objectives for reduced energy usage. The workflows described here and presented in more detail in the referenced reports are examples of how these frameworks and tools can be put to practical use during system design and specification.
The advancement of cyber resilience requires a preliminary stage of characterizing the trade-off space of mitigation options and how these might affect the stability and determinism of an operational technology (OT). This first step will set the stage for the proper cyber-secure and cyber-resilient design and confirm the affects that can be considered and approved by the OT and the security groups. To provide a baseline for this discussion, this paper provides a consideration of the cyberphysical interactions, possible mitigation steps against certain attacks and their corresponding affects that lend to the security design planning and evaluation process. As an integral part of the proposed scheme this work introduces the concept of systemwide fuzzer, i.e., a tool that manipulates the system state in an effort to determine mitigation response sequences that minimize detriments and maximize benefit in accordance with specified operational requirements.
Conserving coral reefs is critical for maintaining marine biodiversity, protecting coastlines, and supporting livelihoods in many coastal communities. Climate change threatens coral reefs globally, but researchers have identified a portfolio of coral reefs (bioclimatic units [BCUs]) that are relatively less exposed to climate impacts and strongly connected to other coral reef systems. These reefs provide a proactive opportunity to secure a long-term future for coral reefs under climate change. To help guide local management efforts, we quantified marine cumulative human impact (CHI) from climate, marine, and land pressures (2013 and from 2008 to 2013) in BCUs and across countries tasked with BCU management. Additionally, we created a management index based on common management measures and policies for each pressure source (climate, marine, and land) to identify a country's intent and commitment to effectively manage these pressures. Twenty-two countries (79%) had increases in CHI from 2008 to 2013. Climate change pressures had the highest proportional contribution to CHI across all reefs and in all but one country (Singapore), but 18 BCUs (35%) and nine countries containing BCUs (32%) had relatively high land and marine impacts. There was a significant positive relationship between climate impact and the climate management index across countries (R 2 = 0.43, p = 0.02), potentially signifying that countries with greater climate impacts are more committed to managing them. However, this trend was driven by climate management intent in Fiji and Bangladesh. Our results can be used to guide future fine-scale analyses, national policies, and local management decisions, and our management indices reveal areas where management components can be improved. Cost-effectively managing local pressures (e.g., fishing and nutrients) in BCUs is essential for building a climate-ready future that benefits coral reefs and people.
Industries supporting the global nuclear infrastructure striving for cost savings, expansions in efficiency, and convenience are likely to adopt components (e.g., hardware, software) that comprise the Internet of Things (IoT) and Industrial Internet of Things (IIoT). These devices offer potential improvements along with security challenges. Modern conveniences achieved through application of technology have propagated through society in the form of interconnected devices, from doorbells to microwave ovens, commonly referred to as IoT. IoT devices are often Internet-connected devices that are designed to send data back to a cloud-based server, where a smart phone application then presents device status and control options. Home-based IoT applications carry a different set of risks when compared to a business or security environment, where there is also a history of convenience and interconnection. Industrial settings have long relied on specifically designed Supervisory Control and Data Acquisition (SCADA) systems for process control where IIoT devices are intended to inform business decisions and augment traditional processes. A recent National Institute of Standards and Technology (NIST) report provides a distinction between process control and IIoT in that traditional process control is not replaced by IIoT, but rather IIoT devices are intended to enhance industrial processes through additional monitoring of various sensors and application of data analytics models using artificial intelligence (AI) and machine learning (ML) (Fagan, Marron, et al. 2021) (Ross, et al. 2021).